$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa File: 2ffa544c-8472-30a4-b0ec-8039acc81923.roa (raw, json) Hash identifier: b9JNUsHpfpLB75ZPGPxBByyhyidsQNyzEhg8dmRqaZo= Subject key identifier: 2F:D1:91:BD:8D:71:10:4A:77:A6:3A:24:3D:D4:CA:81:3B:23:C8:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A105940EB026B4D66E1E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:10:59:40:eb:02:6b:4d:66:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c12f19d4-4da1-4085-b20a-ba849ff8a53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:4f:f7:05:ee:64:16:c6:c5:9a:0f:9d:e5: 15:38:f3:61:1f:db:19:43:6a:d9:7f:a7:9e:1e:be: 02:c4:33:70:9e:0e:d9:97:9e:d1:02:8c:f8:51:2e: e6:6f:ab:76:ee:a6:81:ba:ec:59:12:13:c2:df:5f: 86:31:8c:cf:0a:42:93:1e:44:c5:2f:26:4a:ca:7c: 93:a7:49:13:23:dc:d0:30:b4:ea:2e:e2:34:13:46: 1d:f0:62:34:63:ed:6f:ef:26:fb:2c:b3:b1:1f:ab: 27:64:cd:9e:c4:f6:af:5f:cc:aa:b3:c6:f4:f9:f9: 9b:5c:27:d8:fc:56:0d:27:de:40:78:03:cf:54:ca: a9:77:b1:47:c6:e6:eb:57:e2:5a:da:19:51:f4:94: db:06:91:4e:e5:e4:e7:29:42:f3:6b:ed:cf:aa:23: 1e:60:d8:7c:47:66:fb:76:cb:59:bc:ef:9a:f4:26: c4:51:a8:a9:50:cd:97:3d:66:ee:8c:ee:ab:9f:68: 87:f3:49:4b:2f:7c:d5:39:c1:83:e6:53:30:b3:c1: f8:c9:60:06:4b:c5:79:ed:7a:fe:9b:91:df:5c:4b: bf:c2:ba:92:e9:e8:ac:0f:94:02:ba:f4:c8:09:97: 3c:56:33:ca:17:95:5f:ac:d4:32:09:16:ae:b5:08: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:91:BD:8D:71:10:4A:77:A6:3A:24:3D:D4:CA:81:3B:23:C8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c0:78:fe:83:05:65:97:2b:20:11:f2:23:2a:8b:56:f4:08: de:30:61:14:63:20:44:9c:7d:94:ce:82:52:a4:34:00:40:ff: 92:ff:7d:81:83:0f:52:a2:46:f4:a6:85:f9:0c:20:8c:f7:19: 86:fc:00:5b:86:1c:64:bf:9b:12:78:f8:48:8a:13:16:9f:50: 51:5b:e1:c1:99:a2:cb:53:b4:6f:b6:83:74:55:be:52:aa:04: 2f:ee:a0:b8:26:02:13:3f:50:3e:14:f3:2e:23:fd:cc:00:2a: d3:88:ed:5c:a9:05:a5:e5:4f:dd:ad:fd:d8:53:13:89:d7:c0: 30:75:85:03:87:d4:18:1e:6d:8b:45:9b:b3:e1:3b:d1:7e:c3: 77:fc:aa:66:24:bf:33:8d:37:4d:9f:89:7b:05:84:59:50:d8: 8d:e7:23:44:4c:0f:48:db:52:42:36:97:e0:84:f9:a2:69:4e: d8:d4:01:f2:46:63:e3:67:f1:94:94:73:cc:2f:52:72:f9:b9: 13:19:ce:ba:df:0c:ff:68:ec:1b:00:64:c8:a0:30:69:ae:13: de:66:93:ec:99:2d:14:04:78:36:e0:91:d9:56:8c:0a:8d:c4: a4:cd:f6:3d:f2:fb:11:b4:ec:7e:ba:f9:6e:d2:67:7a:2f:83: 34:18:e2:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShBZQOsCa01m4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzEyZjE5ZDQtNGRhMS00MDg1LWIyMGEtYmE4NDlmZjhhNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxP9wXuZBbGxZoPneUVOPNhH9sZQ2rZf6ee Hr4CxDNwng7Zl57RAoz4US7mb6t27qaBuuxZEhPC31+GMYzPCkKTHkTFLyZKynyT p0kTI9zQMLTqLuI0E0Yd8GI0Y+1v7yb7LLOxH6snZM2exPavX8yqs8b0+fmbXCfY /FYNJ95AeAPPVMqpd7FHxubrV+Ja2hlR9JTbBpFO5eTnKULza+3PqiMeYNh8R2b7 dstZvO+a9CbEUaipUM2XPWbujO6rn2iH80lLL3zVOcGD5lMws8H4yWAGS8V57Xr+ m5HfXEu/wrqS6eisD5QCuvTICZc8VjPKF5VfrNQyCRautQgdAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/Rkb2NcRBKd6Y6JD3UyoE7I8jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZmYTU0NGMtODQ3Mi0z MGE0LWIwZWMtODAzOWFjYzgxOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGKIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTAeP6DBWWXKyAR8iMqi1b0CN4wYRRjIEScfZTOglKkNABA/5L/fYGD D1KiRvSmhfkMIIz3GYb8AFuGHGS/mxJ4+EiKExafUFFb4cGZostTtG+2g3RVvlKq BC/uoLgmAhM/UD4U8y4j/cwAKtOI7VypBaXlT92t/dhTE4nXwDB1hQOH1BgebYtF m7PhO9F+w3f8qmYkvzONN02fiXsFhFlQ2I3nI0RMD0jbUkI2l+CE+aJpTtjUAfJG Y+Nn8ZSUc8wvUnL5uRMZzrrfDP9o7BsAZMigMGmuE95mk+yZLRQEeDbgkdlWjAqN xKTN9j3y+xG07H66+W7SZ3ovgzQY4hI= -----END CERTIFICATE-----Generated at Sun May 11 04:29:45 2025 by rpki-client